Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/s_vj38_GYCn4aemkK1p2_MaatWQ.roa
File: s_vj38_GYCn4aemkK1p2_MaatWQ.roa (raw, json)
Hash identifier: 3JnnhuGGZqjdBr8pR/nRqhjcsI/Mjb5T38Y9Ho7lfvg=
Subject key identifier: B3:FB:E3:DF:CF:C6:60:29:F8:69:E9:A4:2B:5A:76:FC:C6:9A:B5:64
Certificate issuer: /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial: 0194214420109993FB40D43CB8BD2A2EAE96
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/s_vj38_GYCn4aemkK1p2_MaatWQ.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212778
IP address blocks: 145.87.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:20:10:99:93:fb:40:d4:3c:b8:bd:2a:2e:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3fbe3dfcfc66029f869e9a42b5a76fcc69ab564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:b9:f2:5a:fa:72:6f:be:8e:c8:8c:33:c5:
f0:0f:33:07:f4:89:18:d1:71:0c:73:5f:92:71:f9:
ca:30:45:48:4b:87:38:68:2c:45:34:cd:38:d5:1a:
89:c2:13:cc:e0:ae:97:84:0c:2c:86:6a:9c:8a:c2:
ad:17:ea:5c:bb:de:67:7a:2c:43:22:eb:51:02:85:
a9:e5:82:40:0f:c2:f9:4e:e0:81:74:47:96:00:9b:
b3:e5:40:c6:cf:5b:b4:76:91:74:82:37:cd:1d:e7:
cd:12:78:48:26:45:6a:58:5c:9b:aa:46:19:bd:e6:
c5:d6:fe:e2:36:17:79:2b:ae:e2:cd:7c:71:56:96:
72:a0:6d:95:45:61:d8:07:0a:54:53:db:dd:44:00:
f5:67:5c:67:99:76:9a:e0:61:67:89:47:76:5f:cb:
93:70:fa:c9:0e:c8:f6:9d:6b:81:9f:e6:c0:50:d7:
74:53:9c:eb:eb:e3:70:fe:ce:61:27:de:ee:b4:59:
23:57:76:d4:e5:90:3f:3b:e0:42:11:ab:2b:ec:4d:
33:00:1b:71:f0:ba:f7:99:3c:b8:fc:84:32:a0:aa:
88:ce:e8:0c:81:cf:15:ed:b6:72:73:c3:bc:6d:96:
e5:66:4d:5d:da:b0:b0:08:08:7b:69:bd:f6:f1:9f:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:E3:DF:CF:C6:60:29:F8:69:E9:A4:2B:5A:76:FC:C6:9A:B5:64
X509v3 Authority Key Identifier:
keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/s_vj38_GYCn4aemkK1p2_MaatWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.87.0.0/22
Signature Algorithm: sha256WithRSAEncryption
58:94:27:2a:37:d9:13:65:86:39:13:b5:39:ae:ba:ab:db:cb:
7f:b4:f9:a6:c0:e3:bb:e2:a1:7c:52:af:8f:93:9e:9d:2c:0a:
21:aa:af:5f:90:98:86:15:76:2f:ff:ae:48:52:6a:f6:14:09:
d1:08:14:96:3b:4e:9b:1b:da:3c:05:e2:a7:da:82:d8:14:8e:
38:42:28:50:39:cb:82:f6:a2:51:ae:d0:bb:07:bc:04:47:e9:
d1:06:02:b5:5d:2a:13:c2:a9:0f:a7:04:4f:50:27:d7:ad:64:
23:7b:2c:1e:d4:19:13:fe:bc:f5:10:41:40:12:95:eb:89:52:
8c:c6:e0:2b:03:b4:5d:c2:d3:90:5d:52:bd:65:a1:9e:25:03:
b8:8d:c5:b9:98:f2:2b:22:3f:a8:1c:76:ca:9a:5e:e3:95:77:
60:04:1b:fd:fa:60:68:2d:5e:ae:aa:7b:af:c9:55:9a:2c:34:
ca:fb:b4:ac:e7:f5:75:4b:f4:26:71:3d:c2:b2:81:0d:ad:34:
8e:43:01:fd:1d:08:b6:71:2c:b0:14:49:7d:26:80:dd:49:cf:
d0:f5:1d:14:0d:38:04:31:33:98:e6:7e:cf:1f:b3:dd:cd:c8:
72:9b:04:d0:57:06:3c:7c:b1:fb:13:b3:53:09:94:82:09:c0:
2a:c9:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:35 2025 by rpki-client